Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
File: Te9bj_uvfVavXTny-UyUbXL3cPM.mft (raw, json)
Hash identifier: rZ46CBseP94HG7JmQP0OdluEIaMQDxzxmrBNZOMMYPs=
Subject key identifier: BB:F3:22:48:DB:0E:9D:AE:DD:38:09:1F:89:15:06:49:B9:1D:E1:23
Authority key identifier: 4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
Certificate issuer: /CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Certificate serial: 019A006BDD130C68ED0B01F3FEBB25041911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
Manifest number: 135C
Signing time: Mon 20 Oct 2025 07:01:00 +0000
Manifest this update: Mon 20 Oct 2025 07:01:00 +0000
Manifest next update: Tue 21 Oct 2025 07:01:00 +0000
Files and hashes: 1: C0P7fdeMbUq_SUkoUNzucceRO_o.roa (hash: IOK/1252dBZyKN3aeAn78pq+rzDgEYZNrHyoRwRIUaA=)
2: Te9bj_uvfVavXTny-UyUbXL3cPM.crl (hash: dS1H2TyFYKCGMPg6OJBFr8Ks1DhSRGtqdnIcmM9cGu8=)
3: a1f2RcCwBt9bPHww1QitG1PQubM.roa (hash: SAUWVRAb+b0RAh7fSmAkBAsYks5uXo8G20Pv9xs5FYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:dd:13:0c:68:ed:0b:01:f3:fe:bb:25:04:19:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Validity
Not Before: Oct 20 07:01:00 2025 GMT
Not After : Oct 21 07:01:00 2025 GMT
Subject: CN=bbf32248db0e9daedd38091f89150649b91de123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:43:2a:9c:e6:74:e9:54:0e:e3:94:61:6d:c6:
6c:01:ca:df:0a:30:e6:de:31:f8:d8:7d:eb:c9:92:
59:e3:bd:95:ea:ee:b4:16:6b:d4:e1:e4:6c:a3:06:
fe:6a:99:fc:1a:2e:85:74:52:1e:dc:85:e2:75:b6:
07:53:56:dd:a3:db:ea:b1:11:e0:37:0a:11:ea:4c:
9f:07:27:b1:5e:1b:ee:27:54:de:0a:f5:4b:7b:07:
59:d2:d3:53:d4:ed:b2:0d:5d:4f:65:b0:81:26:f9:
92:60:88:ad:d2:a7:14:04:d6:de:31:13:b4:f6:9f:
77:98:08:48:40:55:0b:c4:8f:ce:21:da:05:9c:c9:
e7:bf:f6:5d:7a:79:31:f3:5a:f2:1f:be:6d:d0:74:
b6:03:53:bf:d1:24:4b:c2:46:65:67:ab:4d:84:2f:
35:bc:f3:e8:3e:11:46:92:f6:ee:84:bc:cf:d5:94:
80:c8:b3:19:68:6f:b1:4a:c1:03:69:28:90:2a:c7:
0b:e7:5a:7c:c2:1f:58:fa:19:77:e2:5c:01:b1:10:
7c:e4:70:fc:b5:be:ba:45:78:da:86:9e:ef:68:f9:
47:c2:d9:1e:80:67:90:de:8c:40:09:96:d5:ae:07:
bb:c7:ec:a1:13:64:21:49:cf:89:37:ae:d5:e2:2f:
e7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F3:22:48:DB:0E:9D:AE:DD:38:09:1F:89:15:06:49:B9:1D:E1:23
X509v3 Authority Key Identifier:
keyid:4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:7c:28:19:4f:e3:ea:57:04:96:34:e0:e4:2f:90:3b:c4:9c:
53:8d:43:15:6b:33:08:ba:d2:fc:41:66:f6:bf:f6:1b:7e:6f:
fb:5a:90:6a:13:60:3e:43:7e:f9:49:85:30:34:df:f6:90:65:
12:03:40:66:1b:58:da:2c:0d:55:00:71:9e:46:72:c6:2b:d3:
94:d2:8c:e1:dd:47:97:ba:05:54:90:60:78:c9:48:9c:19:6a:
8b:41:c2:5a:0c:e6:0b:7f:23:07:ad:bd:22:96:76:36:05:81:
b2:3f:43:ee:56:4a:92:c9:7d:3c:33:49:3f:7f:16:b5:a4:75:
a0:5c:0f:af:b2:e2:86:ac:f6:03:06:9d:43:d2:53:1b:3a:a1:
65:ed:d3:31:ee:0d:18:27:b7:ae:8a:eb:47:27:c3:85:9c:d7:
bb:b9:46:38:be:d8:d6:71:04:0a:c1:7f:f4:28:3b:2f:dd:09:
5b:b4:c1:7a:e0:2a:a9:e6:e9:d9:ef:c7:e3:2b:9d:56:b9:ee:
45:e7:b9:15:b5:64:bf:a3:40:9f:f4:42:53:fd:af:27:40:1b:
f8:de:c1:fc:2b:d4:57:6b:31:e6:38:73:7f:78:e2:c0:cf:a3:
0f:a9:77:2d:59:b8:b7:1f:ca:e2:22:53:c4:aa:54:42:8d:d2:
6b:1b:33:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAa90TDGjtCwHz/rslBBkRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZWY1YjhmZmJhZjdkNTZhZjVkMzlmMmY5NGM5NDZkNzJm
NzcwZjMwHhcNMjUxMDIwMDcwMTAwWhcNMjUxMDIxMDcwMTAwWjAzMTEwLwYDVQQD
EyhiYmYzMjI0OGRiMGU5ZGFlZGQzODA5MWY4OTE1MDY0OWI5MWRlMTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0MqnOZ06VQO45RhbcZsAcrfCjDm
3jH42H3ryZJZ472V6u60FmvU4eRsowb+apn8Gi6FdFIe3IXidbYHU1bdo9vqsRHg
NwoR6kyfByexXhvuJ1TeCvVLewdZ0tNT1O2yDV1PZbCBJvmSYIit0qcUBNbeMRO0
9p93mAhIQFULxI/OIdoFnMnnv/Zdenkx81ryH75t0HS2A1O/0SRLwkZlZ6tNhC81
vPPoPhFGkvbuhLzP1ZSAyLMZaG+xSsEDaSiQKscL51p8wh9Y+hl34lwBsRB85HD8
tb66RXjahp7vaPlHwtkegGeQ3oxACZbVrge7x+yhE2QhSc+JN67V4i/nbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvzIkjbDp2u3TgJH4kVBkm5HeEjMB8GA1UdIwQY
MBaAFE3vW4/7r31Wr1058vlMlG1y93DzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGU5YmpfdXZmVmF2WFRueS1VeVViWEwzY1BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi80MDQyN2UtNzRmYS00YTY2LTgzN2Qt
YTUyM2JhY2RjMmJlLzEvVGU5YmpfdXZmVmF2WFRueS1VeVViWEwzY1BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi80MDQyN2UtNzRmYS00YTY2LTgzN2QtYTUyM2JhY2RjMmJl
LzEvVGU5YmpfdXZmVmF2WFRueS1VeVViWEwzY1BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3woGU/j
6lcEljTg5C+QO8ScU41DFWszCLrS/EFm9r/2G35v+1qQahNgPkN++UmFMDTf9pBl
EgNAZhtY2iwNVQBxnkZyxivTlNKM4d1Hl7oFVJBgeMlInBlqi0HCWgzmC38jB629
IpZ2NgWBsj9D7lZKksl9PDNJP38WtaR1oFwPr7Lihqz2AwadQ9JTGzqhZe3TMe4N
GCe3rorrRyfDhZzXu7lGOL7Y1nEECsF/9Cg7L90JW7TBeuAqqebp2e/H4yudVrnu
Ree5FbVkv6NAn/RCU/2vJ0Ab+N7B/CvUV2sx5jhzf3jiwM+jD6l3LVm4tx/K4iJT
xKpUQo3Saxsz7A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:17:10 2025 by rpki-client